Develop Secure Self-Hosted Software with Zero-CVE Images

Replicated customers get access to one free language-based SecureBuild base image to bootstrap your application security posture, and the ability to redistribute other SecureBuild images via the Replicated Distribution Platform once subscribed.

Try for free

The number of CVEs has exploded in the last 5 years and most enterprise customers are scanning images regularly to avoid deploying vulnerable software. As this happens ISVs are feeling the pressure to distribute Zero-CVE versions of their applications. Replicated's SecureBuild offering is the answer.

Repicated's SecureBuild provides ISVs with popular open source images rebuilt from source on trusted hardware. Every image dependency has been fully mapped, and rebuilt with attestations & SBOMs. The resulting 0-CVE images are then tested and verified as drop in replacements for images that often have 10s or 100s of CVEs.

Explore the SecureBuild Catalog

Industry leading CVE SLAs. 6 Day SLA for critical CVEs and 13 Days for High, Medium and Low. We continuously scan images and update all dependencies, and dependencies of dependencies, when fixes are released upstream.

With language specific, runtime base images (Node, Python, Java, GO, etc.) ISVs can build their proprietary images from a secured foundation with all image level dependencies monitored and updated with the same SLAs. Every Replicated plan includes 1 free subscription to a language specific runtime image.

Ready to distribute. Integrate the SecureBuild registry into your Replicated account and start redistributing these images to your customers with your full application into any environment (VPC, air gap, embedded Kubernetes etc)

Coming soon! Deep integration with the Enterprise Portal Security Center to attach security artifacts (CVE scans, SBOMs, Signatures, Network Policy Reports etc) to each release for customers to consume and document.

"Basically, to deliver an on-prem solution, we needed to mobilize a full team of engineers," says Eric Fourrier, CTO and co-founder of GitGuardian. "But, that would have taken the focus away from our core product, which is securing source code. Building an on-prem solution would have kept our resources and talent from doing what we do best."